Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33307a20745aa86bb96b66e15c402d6b603216a8.cer
File:                     33307a20745aa86bb96b66e15c402d6b603216a8.cer (raw, json)
Hash identifier:          c+jkFsmx9Es0dN4mlAT9NgKgBytTiTpR60b403dPtUg=
Subject key identifier:   2F:AA:94:86:8D:BF:84:A5:54:B6:89:63:9E:10:14:AC:60:77:AE:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E32E7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a8b1700-fe86-42c5-8a12-69f81d90b621/33307a20745aa86bb96b66e15c402d6b603216a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a8b1700-fe86-42c5-8a12-69f81d90b621/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Sep 2020 19:49:37 +0000
Certificate not after:    Fri 03 May 2024 17:03:28 +0000
Subordinate resources:    AS: 28064

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14888571 (0xe32e7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 19:49:37 2020 GMT
            Not After : May  3 17:03:28 2024 GMT
        Subject: CN=33307a20745aa86bb96b66e15c402d6b603216a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:41:1b:b3:3f:92:52:cd:6a:0a:1f:0a:f2:
                    54:8a:c8:e2:1c:4a:41:92:3c:85:c3:e1:5c:27:5f:
                    c8:1a:3a:09:aa:51:09:ad:40:6b:90:97:86:0d:f1:
                    bc:cc:e5:18:86:47:0d:3a:ee:50:83:45:87:e2:5b:
                    a4:26:ae:b0:1a:22:79:d8:b3:c0:ce:84:e3:00:5c:
                    c0:3a:83:19:6b:b6:38:fa:8c:84:f4:b5:94:43:11:
                    55:16:f1:c3:e4:c2:fc:fe:eb:f8:37:87:8a:52:17:
                    20:45:4e:dc:f5:a9:c9:3b:c0:a8:f1:88:dd:7d:b1:
                    90:c5:4d:ea:71:e4:a7:38:03:68:3a:2c:57:16:9f:
                    ae:eb:fd:2a:13:18:30:4d:22:d8:81:be:04:b9:0e:
                    df:31:52:07:1a:05:eb:ac:96:74:d1:23:a0:a9:f9:
                    3e:8e:c6:b7:05:cd:46:df:48:d3:b5:0b:86:2b:dc:
                    73:4e:bb:5d:18:5c:93:ef:7d:f3:25:42:9f:c0:82:
                    55:c2:fc:51:1f:c8:0b:e9:82:79:53:c2:62:6a:3c:
                    ba:7e:36:51:42:c1:6e:7d:49:eb:c2:0f:78:ee:41:
                    1c:87:a7:6a:a5:34:c2:6a:62:62:1c:44:7d:27:54:
                    11:e2:71:ad:69:fc:c4:b2:4c:5d:17:63:7c:2a:e7:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AA:94:86:8D:BF:84:A5:54:B6:89:63:9E:10:14:AC:60:77:AE:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8b1700-fe86-42c5-8a12-69f81d90b621/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8b1700-fe86-42c5-8a12-69f81d90b621/33307a20745aa86bb96b66e15c402d6b603216a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28064

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:97:e6:cd:80:59:40:b5:4c:c7:a8:ae:d3:5e:e6:fc:cf:
         dc:1b:95:91:ff:f2:90:cd:30:bd:80:9a:3a:b1:7d:85:dc:b1:
         7c:af:51:51:0b:d0:bd:10:c0:6a:0c:e2:f4:72:a3:27:9f:f6:
         1b:ba:5b:a4:19:d5:da:1a:17:21:ae:ec:83:87:38:e4:aa:f3:
         bf:d4:9c:13:42:be:cd:e3:53:a2:b2:64:30:d9:bc:a3:3a:25:
         71:f2:69:7b:be:94:94:f9:1d:db:7b:c0:5b:b8:c4:d8:86:81:
         63:08:fd:76:bf:f6:71:78:99:cf:95:5a:53:82:18:bc:e3:d6:
         b2:c8:33:bd:bc:3a:f7:02:db:d0:fc:cf:a1:d1:98:34:ef:fa:
         fa:4f:c8:20:c7:36:99:7e:e7:27:32:c8:71:84:c3:64:01:6b:
         60:54:ab:7a:2a:85:84:0c:b9:f0:09:00:90:df:89:08:6d:c2:
         63:b1:74:ef:ff:62:6b:dd:04:50:b8:7f:c6:a0:e3:cf:ec:69:
         df:94:30:2d:38:57:e9:3a:71:aa:f1:5f:fa:cd:06:43:04:91:
         f0:8c:fe:49:9a:d1:37:6d:fb:63:ca:68:a3:88:7a:2b:3e:08:
         29:11:b4:cb:b3:79:8a:13:a8:fe:01:2c:89:7a:d4:04:27:1f:
         22:66:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----